codeql

codeql copied to clipboard

Bumps [rayon](https://github.com/rayon-rs/rayon) from 1.10.0 to 1.11.0. Changelog Sourced from rayon's changelog. Release rayon 1.11.0 / rayon-core 1.13.0 (2025-08-12) The minimum supported rustc is now 1.80. iter::repeatn has been renamed to...

dependabot[bot]

Bumps [actions/labeler](https://github.com/actions/labeler) from 4 to 6. Release notes Sourced from actions/labeler's releases. v6.0.0 What's Changed Add workflow file for publishing releases to immutable action package by @​jcambass in actions/labeler#802 Breaking...

dependabot[bot]

Bumps [actions/setup-dotnet](https://github.com/actions/setup-dotnet) from 4 to 5. Release notes Sourced from actions/setup-dotnet's releases. v5.0.0 What's Changed Breaking Changes Upgrade to Node.js 24 and modernize async usage by @​salmanmkc in actions/setup-dotnet#654 Make...

dependabot[bot]

No codeql for linux ARM64

6

We have developers trying to run codeql in a container from their macs. The container is important to testing, and we don't want to run codeql outside of it. Codeql...

sblatnick

False positive - Incomplete string escaping

9

**Description of the false positive** ``` Incomplete string escaping or encoding This does not escape backslash characters in the input. ``` ```ts part = `"${part.replace(/"/g, '\\"')}"`; ``` This is intentional,...

kuhe

C# SSRF Improvements

5

This PR resolves most of the FPs I found in the SSRF query.

Kwstubbs

False positive: This expression has no effect (because _function with multiple implementations_ has no external side effects [in incorrectly selected version]).

5

**Description of the false positive** https://github.com/PowerDNS/pdns/pull/16363#discussion_r2455671092 > This expression has no effect (because sendUDPResponse has no external side effects). codeql appears to have found https://github.com/PowerDNS/pdns/blob/dec9583d885713a0d0ecb55a74ef83cde5f8a235/pdns/dnsdistdist/test-dnsdist_cc.cc#L83 (which is indeed side effect...

jsoref

paldepind

C++20 modules support

1

Hello CodeQL team, I see that the documentation currently states that “C++20 modules are not supported.” I’d like to ask if there is any ongoing work or roadmap item planned...

rcorvino

[Rust] Get type of expression

7

**Description of the issue** How do I get the type of an expression in Rust? For example, I want to constrain this to only accesses on string-like expressions. ```ql private...

intrigus-lgtm